Companies are starting to sell “risk scores” to doctors, insurers and hospitals to identify patients at risk of opioid addiction or overdose, without patient consent and with little to no regulation.

While the data collection is aimed at helping doctors make more informed decisions on prescribing opioids, it could also lead to blacklisting of some patients.

Powerful companies such as LexisNexis have begun collecting data from insurance claims, digital health records, housing records, and even information about a patient’s friends and family, without telling the patient they are accessing the information.